CVE-2004-0758
Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as...
Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as that of the built-in CA root certificate, which allows remote attackers to cause a denial of service to SSL pages because the malicious certificate is treated as invalid.
Exploit likelihood
What each source reports
NVD Score used
Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as that of the built-in CA root certificate, which allows remote attackers to cause a denial of service to SSL pages because the malicious certificate is treated as invalid.
- Record
CVE-2004-0758- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as that of the built-in CA root certificate, which allows remote attackers to cause a denial of service to SSL pages because the malicious certificate is treated as invalid.
- Record
CVE-2004-0758- Updated
- 2026-11-02
EUVDEUVD-2004-0756 No score
Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as that of the built-in CA root certificate, which allows remote attackers to cause a denial of service to SSL pages because the malicious certificate is treated as invalid.
- Record
EUVD-2004-0756- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6ccr-h2cv-pc67 No score
Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as...
Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as that of the built-in CA root certificate, which allows remote attackers to cause a denial of service to SSL pages because the malicious certificate is treated as invalid.
- Record
GHSA-6ccr-h2cv-pc67- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0758 is a medium vulnerability (CVSS 5.0) in Mozilla, published August 3, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.15%, the 87th percentile. No source names a fixed version.
References
mozilla.org/projects/security/known-vulnerabilities.html
novell.com/linux/security/advisories/2004_36_mozilla.html
redhat.com/support/errata/RHSA-2004-421.html
gentoo.org/security/en/glsa/glsa-200408-22.xml
marc.info?l=bugtraq&m=109900315219363&w=2
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3134
Show 8 moreShow less
securityfocus.com/bid/15495
exchange.xforce.ibmcloud.com/vulnerabilities/16706
kb.cert.org/vuls/id/784278
bugzilla.mozilla.org/show_bug.cgi?id=249004
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127186
nvd.nist.gov/vuln/detail/CVE-2004-0758
github.com/advisories/GHSA-6ccr-h2cv-pc67